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CERTIFICATING SYSTEM FOR PLURALITY OF SERVICES AND 
METHOD THEREOF 

Background of the Invention 
5 Field of the Invention 

The present invention relates to a service 
through a network such as the Internet. In 
particular, the present invention relates to a 
certificating system and a method for certificating 
10 a user who uses a plurality of services. 

Description of the Related Art 

A service provider on a network should 
certificate a user who is accessing the network so 
15 as to charge the user for a service fee. In a 
conventional service system, when one user uses a 
plurality of services, the uses different 
certificating methods designated by the individual 
services . 

20 Fig. 1 shows such a conventional service 

system. When user 11 uses two services A and B, 
the user 11 sends identification (ID) and a 
password (PWD) for the service A to a server 12 of 
the service A. The server 12 references a user 

25 management database (user management DB) 13, 
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certificates the user, and provides the service A 
to the user 11. 

The user 11 sends an ID and a password for the 
service B to a server 14 of the service B. The 
5 server 14 references a user management DB 15, 
certificates the user, and provides the service B 
to the user 11. In such a manner, the user 11 can 
use the network services A and B. 
^ J However, the above-described conventional 

10 service system has the following problems. 

When one user uses a plurality of network 
services, the user should inconveniently use an 
unique ID and an unique password for each of the 
network services. In particular, when different IDs 
15 and passwords are pre-assigned to individual 
services, the user should memorize them and input 
an appropriate ID and an appropriate password 
corresponding to a desired service on a terminal 
unit. Thus, when the number of services that the 
20 user uses increases, the load of the user increases. 

Alternatively, corresponding to a conventional 
certifying method using a unique ID and a unique 
password, a particular service may use an ID and a 
password that a user has registered to another 
25 service. However, when those service providers are 



different business organizations, the service 
provider of the particular service can know the 
password for the other service. Thus, such a 
certificating method is impractical from a view 
5 point of security. 

Summary of the Invention 

An object of the present invention is to 
5 provide a certificating system and a method thereof 

■■4 10 that allow the load of the user to alleviate in a 

SB 

certificating process for a plurality of services 
m while keeping a password and so forth issued by 

I* individual services secret. 

A certificating system according to the 
15 present invention comprises a registering device, a 
receiving device, a determining device, and a 
permitting device. The registering device registers 
certificate information in common with a plurality 
of services. The receiving device receives 

20 certificate information of a user when the user 
accesses a particular service of those. The 
determining device determines whether or not the 
certificate information of the user corresponds to 
the common certificate information. The permitting 
25 device permits the user to use the particular 



service that the user accesses when the certificate 
information of the user corresponds to the common 
certificate information . 

These and other objects, features and 
advantages of the present invention will become 
more apparent in light of the following detailed 
description of a best mode embodiment thereof, as 
illustrated in the accompanying drawings. 

Brief Description of Drawings 

Fig. 1 is a schematic diagram showing the 
structure of a conventional certificating system; 

Fig. 2 is a block diagram showing the theory 
of a processing system according to the present 
invention; 

Fig. 3A is a schematic diagram showing an 
issuing process and a qualifying process for a 
certificate ; 

Fig. 3B is a schematic diagram showing an 
invalidating process for a certificate; 

Fig. 4 is a schematic diagram showing a 
certificating process using a certificate; 

Fig. 5 is a schematic diagram showing a 
certificate management table; 

Fig. 6 is a schematic diagram showing an 
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available service management table; 

Fig. 7 is a schematic diagram showing a user 
information management table; 

Fig. 8 is a flow chart showing an issuing 
5 process and invalidating process for a certificate; 

Fig. 9 is a flow chart showing a qualifying 
process for a certificate; 

Fig. 10 is a block diagram showing the 
structure of a service system; 
10 Fig. 11 is a schematic diagram showing an 

example of the use of a plurality of services; 

Fig. 12 is a block diagram showing the 
structure of an information processing unit; and 

IT, Fig. 13 is a schematic diagram showing a 

t y 

^ 15 record medium. 

?*% 

Description of Preferred Embodiment 

Next, with reference to the accompanying 
drawings, an embodiment of the present invention 

20 will be described. Fig. 2 is a block diagram 
showing the theory of a certificating system 
according to the present invention. A certificating 
system shown in Fig. 2 comprises a registering 
device 21, a receiving device 22, a determining 

25 device 23, and a permitting device 24. The 
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registering device 21 registers certificate 
information in common with a plurality of services. 
The receiving device 22 receives certificate 
information of a user when the user accesses a 
particular service of those. The determining device 
23 determines whether or not the certificate 
information of the user corresponds to the common 
certificate information. The permitting device 24 
permits the user to use the particular service that 
the user accesses when the certificate information 
of the user corresponds to the common certificate 
information . 

The user has certificate information in common 
with a plurality of service. The certificate 
information is pre-issued to the user. When the 
user uses one of the services, the user sends the 
certificate information from the user terminal. 

When the receiving device 22 receives the 
certificate information, the receiving device 22 
sends the information to the determining device 23. 
The determining device 23 compares the received 
certificate information with the certificated 
information registered in the registering device 21 
and determines whether or not the former 
corresponds to the latter. The determined result is 
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sent to the. permitting device 24. When the former 
corresponds to the latter as the determined result 
of the determining device 24, the permitting device 
24 permits the user to use the service. 
5 According to such a certificating system, the 

user can use a plurality of services using one 
piece of certificate information instead of a 
unique ID and a unique password for each service. 
Thus, the user does not need to handle a plurality 

10 of IDs and a plurality of passwords. As a result, 
the load of the user alleviates. 

For example, the registering device 21 shown 
in Fig. 2 corresponds to a user information 
management table 36 shown in Fig. 3A (that will be 

15 described later) . The receiving device 22, the 
determining device 23, and the permitting device 24 
shown in Fig. 2 correspond to servers 32 and 33 
shown in Fig. 3A. Alternatively, the registering 
device 21 shown in Fig. 2 corresponds to a 

20 certificate management DB 35 shown in Fig. 3A. In 
addition, the receiving device 22, the determining 
device 23, and the permitting device 24 shown in 
Fig. 2 correspond to a certificate authority 34. 

In a certificating system according to the 

25 embodiment, when the user presents one digital 
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certificate to a plurality of independent network 
services, the certificating system permits the user 
to use those services. The certificating system 
issues a digital certificate to only a user 
certificated by a predetermined certificating 
method. The digital certificate represents that the 
user can use a plurality of services. 

The digital certificate is generated by a 
certificate authority that digitally signing data 
of which a user name, a certificate issuer, a 
serial number, a user's public key, and so forth 
are integrated corresponding to Specification X. 
509 of ITU-U (International Telecommunication Union 
Telecommunication Standardization Sector) . The 
certificate authorizes that the public key 
contained therein belongs to the user. 

Fig. 3A shows an issuing process and a 
qualifying process for a digital certificate 
performed by such a certificating system. In Fig. 
3A, services A and B are membership services using 
IDs and passwords. Services 32 and 33 provide the 
services A and B to a user 31, respectively. A 
certificate authority 34 is a certificate issuing 
organization that is independent from the service 
providers. The certificate authority 34 issues a 



digital certificate that is common with the 
services A and B to the user 31. The digital 
certificate is referred to as common certificate. 

To allow the user 31 to be certificated with 
the common certificate, the certificate authority 
34 should issue a common certificate to the user 31 
In that case, the certificate authority 34 issues a 
common certificate to the user 31 through the 
service A. When the user 31 initially accesses the 
service B, the server 33 qualifies the common 
certificate. The servers 32 and 33 contain user 
information management tables 36 and 37, 
respectively. Each of the information management 
tables 36 and 37 contain an ID, a password, and so 
forth of the user 31. In that case, the following 
process is performed in this sequence. 

PI: The user 31 sends the ID and the password 
for the service A to the server 32. The server 32 
references the user information management table 36 
and certificates the user 31. When the certificated 
result is OK, the server 32 requests the 
certificate authority 34 to issues the common 
certificate . 

P2 : The server 32 receives the common 

certificate from the certificate authority 34 and 
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issues the common certificate to the user 31. At 
that point, the common certificate that the user 31 
has certificates the use of only the service A. A 
certificate management DB 35 of the certificate 
authority 34 contains the relevant user name and 
information that represents the validity of the use 
of the service A along with identification 
information (for example, a serial number) of the 
common certificate. The user information management 
table 36 contains a serial number (Ser. No.) of the 
common certificate along with the ID and the 
password. 

P3: The user 31 presents the issued common 
certificate to the server 33. 

P4 : The server 33 determines that the present 
common certificate does not certificate the use of 
the service B and request the user 31 for the ID 
and the password for the service B. 

P5: The user 31 sends the ID and the password 
for the service B to the server 33. 

P6: The server 33 references the user 

information management table 37 and certificates 
the user. When the certificated result is OK, the 
server 33 provides the service B to the user 31. 
Thereafter, the common certificate that the user 31 



has allows the user 31 to use the service B. At 
that point, the common certificate that the user 31 
has certificates the use of the services A and B. 
The certificate management DB 35 contains 
information that represents the validity of the use 
of the services A and B. In addition, the user 
information management table 37 contains the serial 
number of the common certificate along with the ID 
and the password. 

At steps PI and P5, the user is certificated 
with IDs and passwords. Alternatively, the user may 
be certificated with another certificating method 
using finger print information, voice print 
information, picture information, or the like. When 
the user wants to quit the use of a service, the 
user performs an invalidating process for the 
common certificate or a service use prohibiting 
process. When the user performs the invalidating 
process for the common certificate, the following 
process is performed in this sequence as shown in 
Fig. 3B. 

Pll: The user 31 sends the ID and the password 
for the service A or the common certificate to the 
server 32 . 

P12: When the server 32 receives the ID and 



the password, the server 32 references the user 
information management table 36 and certificates 
the user 31. When the certificated result is OK, 
the server 32 notifies the user 31 that the 
certificated result is OK. When the server 32 
receives the common certificate, the server 32 
certificates the user 31 in a predetermined 
certificating method (that will be described 
later) and notifies the user 31 of the certificated 
result . 

P13: The user 31 requests the server 32 for 
the invalidation of the common certificate that the 
user 31 has. The server 32 notifies the certificate 
authority 34 of the serial number of the common 
certificate and requests the certificate authority 
34 to perform the invalidating process for the 
common certificate. The certificate authority 34 
deletes the information of the common certificate 
from the certificate management DB 35. The server 
32 deletes the serial number of the common 
certificate from the user information management 
table 36. 

P14: Thereafter, the user 31 presents the 
common certificate that the user 31 has as 
certification information to the server 33. The 



server 33 notifies the certificate authority 34 of 
the serial number of the presented common 
certificate and inquires the certificate authority 
34 for the validity of the common certificate. 

P15: Since the notified serial number has not 
been registered to the certificate management DB 35, 
the certificate authority 34 notifies the server 33 
that the checked result is NG. The server 33 
deletes the serial number of the common certificate 
from the user information management table 37 and 
notifies the user 31 of the invalidity of the use 
of the service B . 

Fig. 4 shows a user certificating process 
using an issued common certificate. In the case, a 
service is provided in the following sequence. 

P21: The user 31 presents a common certificate 
that the user 31 has as certification information 
to the server 32. The server 32 notifies the 
certificate authority 34 of the serial number of 
the presented common certificate and requests the 
certificate authority 34 to check for the common 
certificate. The certificate authority 34 

references the certificate management DB 35 and 
checks whether or not the notified serial number 
has been registered thereto. When the notified 
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serial number has been registered and the service A 
can be used, the certificate authority 34 returns 
OK as the checked result to the server 32. 

P22: When the server 32 receives OK from the 
certificate authority 34, the server 32 provides 
the service A to the user 31 . 

P23: The user 31 presents the common 

certificate that the user 31 has as certification 
information to the server 33- The server 33 
receives the checked result from the certificate 
authority 34 in the same manner as the server 32. 

P24: When the server 33 receives OK from the 
certificate authority 34, the server 33 provides 
the service B to the user 31. 

In that example, the case that the user uses 
two services was described. This applies to the 
case that the user uses three or more services. The 
servers 32 and 33 request the certificate authority 
34 for checking for the common certificate so as to 
determine whether the presented common certificate 
is invalid. However, it should be noted that the 
checking step can be omitted. 

In that case, in the invalidating step, the 
certificate authority 34 notifies all servers of 
relevant services of the serial number of the 
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invalidated common certificate. Each server deletes 
the serial number from the user information 
management table. When the user presents the common 
certificate to a particular server, if the serial 
5 number has been registered to a relevant user 
information management table, the certificated 
result is OK. If the serial number has not been 
registered, the certificated result is NG. 

In the certificating system shown in Figs. 3A, 

10 3B, and 4, the user can use a plurality of service 
by presenting only a common certificate without 
need to use designated IDs and passwords for the 
individual services. Thus, the user does not need 
to memorize a plurality of IDs and passwords. In 

15 addition, whenever the user uses a service, the 
user does not need to input relevant ID and 
password. Thus, the user's load significantly 
alleviates . 

The certificate management DB 35 contains a 
20 certificate management table shown in Fig. 5 and an 
available service management table shown in Fig. 6. 
The certificate management table shown in Fig. 5 
contains a serial number, a user name, an address, 
and an e-mail address of a common certificate. The 
25 available service management table shown in Fig. 6 



contains a serial number and an available service 
ID of a common certificate. The certificate 
management table and the available service 
management table are generated for each common 
certificate . 

Fig. 7 shows an example of the user 
information management tables 36 and 37. The user 
information management table shown in Fig. 7 
contains a user ID, a password, a user's name, a 
use's address, and a serial number of a common 
certificate. The user information management table 
is generated for each user. 

Fig. 8 is a flow chart showing a process 
performed in the case that the user 31 requests the 
server 32 of the service A to issue or invalidate a 
common certificate. First of all, the user 31 
accesses the server 32 (at step SI) . The server 32 
displays a login screen on the user's terminal unit 
(at step S2) . Thereafter, the user 31 inputs an ID 
and a password for the service A (at step S3) . The 
server 32 references the user information 
management table 36 and checks for the input ID and 
password (at step S4) . 

When the determined result at step S4 is No 
(namely the input ID and password are not valid) , 



the server 32 repeats the process from step S2. 
When the determined result at step S4 is Yes 

(namely, the input ID and password are valid) , the 
server 32 references the user information 
management table 36 and checks whether or not a 
common certificate has been issued to the user 31 

(at step S5) - 

When the determined result at step S5 is No 

(the serial number of the use's common certificate 
has not been registered to the user information 
management table 36) , the server 32 determines that 
the common certificate has not been issued to the 
user 31 and requests the certificate authority 34 
to issue the common certificate (at step S6) . 

Thus, the certificate authority 34 issues the 
common certificate (at step S7) . At that point, the 
certificate authority 34 generates a certificate 
management table that contains the serial number of 
the common certificate and the user information. In 
addition, the certificate authority 34 generates an 
available service management table that contains 
the serial number of the common certificate and the 
ID of the service A. The certificate authority 34 
places those tables to the certificate management 
DB 35. 
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Thereafter, the server 32 delivers the issued 
common certificate to the user 31. The server 32 
records the serial number of the common certificate 
to the user information management table 36 (at 
5 step S8) - Thereafter, the server 32 completes the 
process . 

When the determined result at step S5 is Yes 
(namely, the user information management table 36 
contains the serial number of the common 
10 certificate) , the server 32 notifies the user 31 
that the common certificate has been issued and 
inquires the user 31 whether or not the user 31 
want to invalidate the common certificate (at step 
S9) . When the determined result at step S9 is No 
[0 15 (namely, the user 31 does not want to invalidate 

the common certificate) , the server 32 completes 
the process. 

When the determined result at step S9 is Yes 
(namely, the user wants to invalidate the common 
20 certificate) , the server 32 notifies the 
certificate authority 34 of the serial number of 
the common certificate and requests the certificate 
authority 34 to invalidate it (at step S10) . Thus, 
the certificate authority 34 deletes the 
25 certificate management table and the available 
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service management table corresponding to the 
notified serial number and notifies the server 32 
of the processed result. The server 32 deletes the 
serial number of the common certificate from the 
5 user information management table 36 and notifies 
the user 31 that the common certificate has been 
invalided. Thereafter, the server 32 completes the 
process . 

Fig. 9 is a flow chart showing a process in 
10 the case that the user 31 requests the server 33 to 
qualify a common certificate that the user 31 has. 
First of all, the user 31 accesses the server 33 
(at step Sll) and presents the common certificate 
j« thereto (at step S12) . 

:S 15 Thereafter, the server 33 checks whether the 

3 user information management table 37 contains the 

serial number of the presented common certificate 
(at step S13). When the determined result at step 
S13 is No (namely, the user information management 
20 table 37 does not contain the serial number) , the 
server 33 performs the process at steps S14 to S16 
that are the same steps as steps S2 to S4, 
respectively. 

When the determined result at step S16 is Yes 
25 (namely, the ID and the password are valid) , the 
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server 33 notifies the certificate authority 34 of 
the serial number of the presented common 
certificate and requests the certificate authority 
34 to validate the use of the service B with the 
5 common certificate (at step S17). 

Thus, the certificate authority 34 adds the ID 
of the service B to an available service management 
table corresponding to the notified serial number 
and notifies the server 33 of the validity of the 
10 use of the service B (at step S18) . Thereafter, the 
server 33 records the serial number of the common 
certificate to the user information management 
table 37 (at step S19) . Thereafter, the process is 
completed. 

09 15 When the determined result at step S13 is Yes 

: . 5 

□ (namely, the user information management table 37 

contains the serial number of the common 
certificate) , the server 33 inquires the user 31 
whether or not the user 31 want to prohibit the use 

20 of the service B (at step S20-1) . When the 
determined result at step S20-1 is No (namely, the 
user does not want to prohibit the use of the 
service B) , the server 33 completes the process. 

When the determined result at step S20-1 is 

25 Yes (namely, the user wants to prohibit the use of 
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the service B) , the server 33 deletes the serial 
number of the presented common certificate from the 
user information management table 37 (at step S20- 
2) and requests the certificate authority 34 to 
5 delete the service B from the available service of 
the common certificate (at step S20-3) - 

Thus, the certificate authority 34 deletes the 
service ID of the service B from the relevant 

ass. 

available service management table and notifies the 

si 

e E 10 server 33 that the service B has been deleted (at 

J? step S20-4) . Thereafter, the server 33 notifies the 

p)J user 31 that the use of the service B has been 

prohibited. Thereafter, the server 33 completes the 
^ process. 

ru 

£Q 15 In the above-described example, the 

□ certificate management table and the available 

service management table are independently provided. 
Alternatively, information of those tables may be 
contained in one table. 
20 Next, with reference to Figs. 10 and 11, an 

example of which the above-described certificating 
system is applied to Nifty, which is an Internet 
membership service . 

Many companies provide services as portal 
25 sites on Nifty. A portal site, which is a huge web 



22 



site that is a gate of the Internet, has links to 
various service sites. However, when a plurality of 
independent services are concentrated to a portal 
site, the certificating process becomes complicated 
Besides Nifty, such a problem takes place at any 
portal site. In that situation, using the above- 
described common certificate, the certificating 
process can be simply performed for a plurality of 
services . 

Fig. 10 is a block diagram showing the 
structure of a service system including a portal 
site Finance@nif ty, which provides financial 
services. The service system shown in Fig. 10 
comprises the Internet 41, a server 42 of a 
certificate authority, a server 43 of a @nifty 
membership service, a server 44 of a bank, a server 
45 of a credit card company, a server 46 of an 
insurance company, a server 47 of an Internet shop, 
a server 48 of an electric power company, a server 
49 of a gas company, and a user terminal unit 50. 

In the example, the @nifty, the bank, the 
credit card company, the insurance company, the 
Internet shop, the electric power company, and the 
gas company are independent business organizations 
that provide respective membership services. 



The server 42 of the certificate authority 
comprises a certificate management DB 35, a 
certificate managing portion 51, and a service 
management database 52. The certificate management 
DB 35 contains a certificate management table and 
an available service management table for each 
common certificate. The certificate managing 

portion 51 for example issues, checks, and 
invalidates a common certificate using the 
certificate management DB 35. The service 

management DB 52 contains information about each 
service. The certificate managing portion 51 

performs a membership qualifying process for each 
service. 

The server 43 of the @nifty membership service 
comprises a membership screen controlling portion 
61, a charging managing portion 62, a user 
management DB 63, a screen layout DB 64, and a 
charging information DB 65. The user management DB 
63 contains a user information management table of 
each user. The screen layout DB 64 contains data of 
a membership service screen. The charging 

information DB 65 contains data of charged amount 
collected from the servers 47, 48, and 49 and so 
forth . 



The membership screen controlling portion 61 
controls a screen display of the user terminal unit 
50 using the user management DB 63 and the screen 
layout DB 64 . The charging managing portion 62 
controls a screen display of the charged amount 
using the charging information DB 65. 

For example, a page 71 of the Finance@nif ty 
displayed on the user terminal unit 50 contains 
items of a membership service 81 and a certificate 
82. When the user designates those items, the user 
terminal unit 50 automatically sends its common 
certificate to the server 43. The server 43 
certificates the user with the common certificate. 
When the user has been successfully certificated, 
the user terminal unit 50 displays a page 72 of a 
member menu. The page 72 contains items of a public 
utility charge settlement service 83, a statement 
display service 84, an address change notice 
service 85, and a member setting 86. 

When the user selects the public utility 
charge settlement service 83, the user terminal 
unit 50 sends the common certificate to the server 
44. The server 44 certificates the user with the 
common certificate. When the user has been 

successfully certificated, the user terminal unit 
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50 displays a page 73 of public utility charge 
settlement. The page 73 contains items of account 
transfer application 87, Internet personal payment 
88, and bank settlement application 89. 
5 When the user selects the statement display 

service 84, the user terminal unit 50 displays a 
page 74 of user's detailed financial information. 
At that point, when necessary, the user terminal 
%Q unit 50 sends the common certificate to the servers 

B p 10 44 and 45. The servers 44 and 45 certificate the 

%Q ■ 

«C user. 

ijf The layout data of the page 74 is supplied 

from the membership screen controlling portion 61. 
^ The data of the charged amount is supplied from the 

nj 

CO 15 charging managing portion 62. The balance data of 

Q the bank account is supplied from the server 44 of 

the bank. The charge settlement data of the credit 
card is supplied from the server 45 of the credit 
card company. 

20 Fig. 11 shows a process of which a user uses 

the statement display service 84 in the service 
system shown in Fig. 10. In the process, a 
plurality of services of business organizations 
such as @nifty, a bank, and a credit card company 

25 are provided in the following sequence. 



P31: The user accesses the Finance@nif ty site 
with the common certificate on the user terminal 
unit 50. 

P32 : The server 43 of the @nifty membership 
service notifies the server 42 of the certificate 
authority of the serial number of the common 
certificate - 

P33: The server 42 references a relevant 
available service management table of the 
certificate management DB 35. When the common 
certificate represents the validity of the @nifty 
membership service, the server 42 returns OK as the 
checked result to the user terminal unit 50. 

P34 : The server 43 causes the user terminal 
unit 50 to display the member menu 72. 

P35: The user selects the statement display 
service from the member menu 72. 

P36: The server 43 notifies the server 42 of 
the certificate authority of the serial number of 
the common certificate and inquires the server 42 
of the certificate authority for available services 
corresponding to the notified serial number. 

P37: The server 42 references a relevant 
available service management table, obtains an 
available service ID corresponding to the notified 
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serial number, and returns it to the server 43. 

P38: The server 43 sends layout data for 
drawing a screen including a display region 
corresponding to the received service ID to the 
user terminal unit 50. The layout data is described 
in HTML (HyperText Markup Language) , XML 
(extensible Markup Language) or the like. 

P39: The user terminal unit 50 inquires the 
server of the A bank for statement information with 
the common certificate . 

P40: The server of the A bank notifies the 
server 42 of the certificate authority of the 
serial number of the presented common certificate. 

P41: The server 42 references a relevant 
available service management table of the 
certificate management DB 35. When the common 
certificate represents the validity of the service 
of the A bank, the server 42 of the certificate 
authority returns OK as the checked result to the 
user terminal unit 50. 

P42: The server of the A bank sends balance 
data of the user's account as the statement 
information to the user terminal unit 50. 

P43 to P46: The server of the B bank sends 
balance data of the user's account to the user 
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terminal unit 50 corresponding to the certificated 
result of the common certificate in the same manner 
as the server of the A bank. 

As a result, the user terminal unit 50 
displays the statement page 74. In the same manner, 
the server 45 of the credit card company and the 
server 4 6 of the insurance company can provide the 
statement information of the statement page 74. 

According to the service system shown in Fig. 
10, statement information such as account balances 
and charged amounts of individual services can be 
integrally displayed on one layout screen. Thus, 
the user can transversely use a plurality of 
services. In Fig. 10, the function of the 

certificate authority is independent from each 
service. Alternatively, the function of the 

certificate authority may be contained in the 
@nifty membership service. 

The servers 42 to 49 and the user terminal 
unit 50 shown in Fig. 10 can be composed of an 
information processing unit (computer) shown in Fig, 
12. The information processing unit shown in Fig. 
12 comprises a CPU (Central Processing Unit) 91, a 
memory 92, an input device 93, an output device 94, 
an external storing device 95, a medium driving 
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device 96, and a network connecting device 97. 
These devices are connected by a bus 98 . 

The memory 92 includes for example a ROM (Read 
Only Memory) and a RAM (Random Access Memory) . The 
5 memory 92 stores programs and data. The CPU 91 
executes a program using the memory 92 so as to 
perform a desired process. 

For example, the certificate managing portion 

!■ E 

51, the membership screen controlling portion 61, 

•- r. 
"a. 5 

2 10 and the charging managing portion 62 shown in Fig. 

V ^ 10 are stored as software components that are 

a: c 

iji described as programs to the memory 92. 

e The input device 93 includes for example a 

fy keyboard, a pointing device, and a touch panel. The 

: s-ji 

ffl 15 input device 93 is used to input a command and 

m information. The input device 93 is used by the 

operator (a service provider or a user) . The output 
device 94 includes for example a display device, a 
printer, and a speaker. The output device 94 is 
20 used to prompt a user for data and to output 
processed results . 

The external storing device 95 is for example 
a magnetic disc device, an optical disc device, a 
magneto-optical disc device, or a tape device. The 
25 information processing unit stores the above- 
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described programs and data to the external storing 
device 95. When necessary, the information 

processing unit loads the programs and data to the 
memory 92. The external storing device 95 may be 
5 used for the certificate management DB 35, the 
service management DB 52, the user management DB 63, 
the screen layout DB 64, and the charging 
information DB 65 shown in Fig. 10. 
^ The medium driving device 96 drives a portable 

10 record medium 99 and accesses the contents thereof. 

The portable record medium 99 is for example a 
memory card, a floppy disk, a CD-ROM (Compact Disc 
Read Only Memory) , an optical disc, or a magneto- 
optical disc from which any computer can read data. 
15 The operator stores the above-described programs 
and data to the portable record medium 99. When 
necessary, the operator loads the programs and data 
to the memory 92. 

The network connecting device 97 is connected 
20 to any communication network such as Internet 41. 

The network connecting device 97 converts data so 
as to communicate with the communication network. 
The information processing unit receives the above- 
described programs and data from another device 
25 through the network connecting device 97. When 



necessary, the information processing unit loads 
the programs and data to the memory 92. 

Fig. 13 shows a record medium from which a 
computer can read a program and data and supply 
them to the information processing unit shown in 
Fig. 12. The programs and data stored in the 
portable record medium 99 and a database 101 of a 
server 100 are loaded to the memory 92. At that 
point, the server 100 generates a transfer signal 
for transferring programs and so forth and 
transmits them to the information processing unit 
through any transfer medium on the network. The CPU 
91 executes the programs with the data so as to 
perform a required process. 

According to the above-described embodiment, 
the digital certificate corresponding to ITU-T 
Specification X.509 is used as certification 
information. When necessary, certification 

information corresponding to another specification 
may be used . 

According to the present invention, with one 
piece of certification information in common with a 
plurality of services, the user can be certificated 
for each service. Thus, the user does not need to 
use different IDs and passwords issued by the 



individual services. Thus, the load of the user 
alleviates. In addition, it is not necessary to 
exchange a password and so forth among different 
services. Thus, the security of the system is 
maintained . 

Although the present invention has been shown 
and described with respect to a best mode 
embodiment thereof, it should be understood by 
those skilled in the art that the foregoing and 
various other changes, omissions, and additions in 
the form and detail thereof may be made therein 
without departing from the spirit and scope of the 
present invention . 



